TradeKit

1. Who we are

TradeKit ("we", "us" or "our") operates the TradeKit application available at tradekit.uk and via mobile apps. We are registered in England and Wales.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: help@tradekit.uk

2. What data we collect

We collect and process the following categories of personal data:

Account data: your name, email address and profile picture (provided when you sign in with Google).
Business data: your business name, address, phone number, logo and payment details you enter in Business Settings.
Client data: names, email addresses, phone numbers and addresses of your clients, as entered by you.
Invoice and estimate data: line items, amounts, dates and any digital signatures captured.
Job and scheduling data: project details, notes, photos and appointment times.
Usage data: pages visited, features used, device type and IP address (collected via analytics).
Payment data: billing information processed securely via our payment provider. We do not store card numbers.

3. How we use your data

We use your data to:

Provide, maintain and improve the TradeKit service
Process payments and manage your subscription
Respond to your support requests
Send you important product and account updates (you may opt out of marketing emails)
Analyse usage to improve features and fix bugs
Comply with legal obligations

4. Legal basis for processing (UK GDPR)

We process your personal data on the following legal bases:

Contract: processing necessary to provide the service you have signed up for.
Legitimate interests: analytics, security, product improvement.
Consent: marketing communications (where applicable).
Legal obligation: where required by law.

5. Data sharing

We do not sell your personal data. We may share data with:

Infrastructure providers: cloud hosting and database services (e.g. Neon, AWS/Cloudflare) used to run the app.
Payment processor: Stripe for subscription billing.
Analytics: anonymised usage data may be processed via analytics tools.
Google: if you sign in with Google, your account data is obtained from Google under their terms.
Legal authorities: where required by law, court order or regulation.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data is removed within 30 days except where we are required to retain it for legal or financial reasons (e.g. invoice records may be retained for up to 7 years as required by HMRC guidelines).

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to processing based on legitimate interests
Request data portability
Withdraw consent at any time

To exercise any of these rights, contact us at help@tradekit.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar technologies. See our Cookie Policy for details.

9. Security

All data is transmitted over HTTPS/TLS. Passwords are hashed using industry-standard algorithms. We use enterprise-grade cloud infrastructure with encryption at rest. No system is completely secure, but we take reasonable and appropriate measures to protect your data.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of TradeKit after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, please email: help@tradekit.uk